skills/ticruz38/skills/inbox-triage/Socket

inbox-triage

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The core capabilities fit an inbox-triage purpose and the documented data flow is mostly local, but trust is weakened by the unverifiable OpenClaw package references and the prerequisite dependency on a separate sibling OAuth CLI. This looks more like a plausible but partially unverifiable skill than confirmed malware.

Confidence: 81%Severity: 58%

Audit Metadata

Analyzed At

Jun 26, 2026, 12:01 AM

Package URL

pkg:socket/skills-sh/ticruz38%2Fskills%2Finbox-triage%2F@693b59611e451d1e2636efaa099a4bc68577b4aae1385ec9d53a17ad8ac41566